General
- Target e7b65dfce6a10832c757f552ab7d79f0.exe
- Size 396KB
- Sample220720-pp216sfca5
- SHA256 14f0d0932bbf01eddc2a59bb7fe57b775eba49b5cbb8deff2602e25a232f6c8c
- MD5 e7b65dfce6a10832c757f552ab7d79f0
- SHA1 1279171b6423bb518ee3424b6f2b31852ee93dcf
- SHA512 4f129396541d7ebccd95f7a0ca70fd2992d99a907b8d67bee3aa63f1b7f1ac2382b5c6a04d83a57d86fbcfc2fa17be30a74e4d293d0a798657279043de9b50a9
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
e7b65dfce6a10832c757f552ab7d79f0.exe
Resource
win7-20220715-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
adsfelix
C2
-
timenist.agency:80
Attributes
-
auth_value
14d72b624c4006b5e38741a8e1d4fbc2
Targets
-
- Target e7b65dfce6a10832c757f552ab7d79f0.exe
- Size 396KB
- SHA256 14f0d0932bbf01eddc2a59bb7fe57b775eba49b5cbb8deff2602e25a232f6c8c
- MD5 e7b65dfce6a10832c757f552ab7d79f0
- SHA1 1279171b6423bb518ee3424b6f2b31852ee93dcf
- SHA512 4f129396541d7ebccd95f7a0ca70fd2992d99a907b8d67bee3aa63f1b7f1ac2382b5c6a04d83a57d86fbcfc2fa17be30a74e4d293d0a798657279043de9b50a9
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.